freeipa vulnerabilities (Ubuntu)
29 vulnerabilities.
-
freeipaUbuntu Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership 5.4 Medium -
freeipaUbuntu Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url 8.1 High -
freeipaUbuntu Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service 8.1 High -
freeipaUbuntu Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci 9.8 Critical -
freeipaUbuntu Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html 4.3 Medium -
freeipaUbuntu Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value 6.5 Medium -
freeipaUbuntu Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships 9.6 Critical -
freeipaUbuntu Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read 7.5 High -
freeipaUbuntu Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore 8.7 High -
freeipaUbuntu Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding 4.3 Medium -
freeipaUbuntu Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read 7.5 High -
freeipaUbuntu Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes 8.2 High -
freeipaUbuntu Freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during oauth2 device authorization 4.2 Medium -
freeipaUbuntu Freeipa: idm: privilege escalation from host to domain admin in freeipa 9.1 Critical -
freeipaUbuntu Freeipa: idm: privilege escalation from host to domain admin in freeipa 9.1 Critical -
freeipaUbuntu Freeipa: administrative user data leaked through systemd journal 5.5 Medium -
freeipaUbuntu Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 8.1 High -
freeipaUbuntu Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 8.8 High -
freeipaUbuntu Freeipa: specially crafted http requests potentially lead to denial of service 5.3 Medium -
freeipaUbuntu Ipa: invalid csrf protection 6.5 Medium -
freeipaUbuntu A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1... 5.3 Medium -
freeipaUbuntu Code injection in FreeIPA 8.8 High -
freeipaUbuntu FreeIPA logs passwords embedded in commands in calls using batch 5.7 Medium -
freeipaUbuntu A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache... 5.6 Medium -
freeipaUbuntu Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's... 6.3 Medium -
freeipaUbuntu It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the ... 7.5 High -
freeipaUbuntu FreeIPA might display user data improperly via vectors involving non-printable characters. 7.5 High -
freeipaUbuntu FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication... 7.5 High -
freeipaUbuntu The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which... 6.5 Medium